Re: OpenPGP smartcard and P-256 in non expert mode

2022-08-11 Thread Sosthène Guédon | Nitrokey via Gnupg-users
n 8/11/22 15:30, Ingo Klöcker wrote Only experts will be able to make an educated decision between P-256 and P-384. It's good to give "normal" people less choice by default because more choice will just confuse them even more. Even having to choose between Curve25519 and P-384 will be too much al

Re: OpenPGP smartcard and P-256 in non expert mode

2022-08-11 Thread Ingo Klöcker
On Donnerstag, 11. August 2022 09:39:24 CEST Sosthène Guédon | Nitrokey via Gnupg-users wrote: > I don't understand why generating a key on a smartcard only offers > Curve25519 and P-384 for ECC cryptography unless the --expert flag is used. You are asking the question the wrong way. Why should P

Re: How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency?

2022-08-11 Thread Robert J. Hansen via Gnupg-users
Subject: How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency? Short answer: he didn't. GnuPG is one of the tools that Snowden used to uncover the secrets of the NSA. This is incorrect. According to Glenn Greenwald, he used GnuPG to communicate priv

Re: OpenPGP smartcard and P-256 in non expert mode

2022-08-11 Thread Sosthène Guédon | Nitrokey via Gnupg-users
Hi! Please share your GnUPG version and the type of smartcard you are using with us. A 9 year old commit is not very helpful. I'm using gpg 2.2.36 and a OpenPGP smart card implementation we are currently developing. You're right the commit itself isn't very helpful, here are is the code tha

Re: a bit off topic, how to find encrytped files (ransom attack)

2022-08-11 Thread Uwe Brauer via Gnupg-users
>>> "JC" == Juergen Christoffel writes: > On Fri, Aug 05, 2022 at 05:45:53PM +0200, Uwe Brauer via Gnupg-users wrote: >> 1. just for the first very rough analysis what is a convenient command to >> get a list of files that have high entropy? > The first step might be to install tripwire and onl

Re: OpenPGP smartcard and P-256 in non expert mode

2022-08-11 Thread Werner Koch via Gnupg-users
Hi! Please share your GnUPG version and the type of smartcard you are using with us. A 9 year old commit is not very helpful. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein signature.asc Description: PGP sign

OpenPGP smartcard and P-256 in non expert mode

2022-08-11 Thread Sosthène Guédon | Nitrokey via Gnupg-users
Hi! I don't understand why generating a key on a smartcard only offers Curve25519 and P-384 for ECC cryptography unless the --expert flag is used. P-384 is offered even when the hardware key doesn't support it and other curves which the hardware supports are not offered which is confusing. Why

Re: How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency?

2022-08-11 Thread Fernando Cassia via Gnupg-users
On 11/08/2022, Turritopsis Dohrnii Teo En Ming via Gnupg-users wrote: > Subject: How did Edward Joseph Snowden use GnuPG to uncover the > secrets of the National Security Agency? > > Good day from Singapore, > > [QUOTE] > > Arguing that you don't care about the right to privacy because you > have

Re: How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency?

2022-08-11 Thread Turritopsis Dohrnii Teo En Ming via Gnupg-users
On Thu, 11 Aug 2022 at 15:56, Fernando Cassia wrote: > > On 11/08/2022, Turritopsis Dohrnii Teo En Ming via Gnupg-users > wrote: > > Subject: How did Edward Joseph Snowden use GnuPG to uncover the > > secrets of the National Security Agency? > > > > Good day from Singapore, > > > > [QUOTE] > > >

How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency?

2022-08-11 Thread Turritopsis Dohrnii Teo En Ming via Gnupg-users
Subject: How did Edward Joseph Snowden use GnuPG to uncover the secrets of the National Security Agency? Good day from Singapore, [QUOTE] Arguing that you don't care about the right to privacy because you have nothing to hide is no different from saying you don't care about free speech because y